Hello all,
I'm think that our system may have been cracked. I think they got
in through imapd, because of what was in the logfile(see attachment).
My question is, did they really get in through imapd? On
www.cert.org there was an advisory for imapd, but that was last year this
time. Cert said the affected versions were <=10.234, while our version
reports 11.241. Are newer versions still vulnerable?
Thanks in Advance,
Dan DeMond
daemon.log.0:Jun 19 07:31:08 XXXXXX imapd[16504]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:14 XXXXXX imapd[16505]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:14 XXXXXX imapd[16506]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16508]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16507]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16509]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16510]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16511]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16513]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16512]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16517]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16516]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16515]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16514]: connect from cinequanon.com
daemon.log.0:Jun 19 07:31:15 XXXXXX imapd[16518]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:36 XXXXXX imapd[16584]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16585]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16586]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16587]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16589]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16588]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16590]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16591]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16593]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16592]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16597]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16596]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16595]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16594]: connect from cinequanon.com
daemon.log.0:Jun 19 07:46:45 XXXXXX imapd[16598]: connect from cinequanon.com
mail.info.0:Jun 19 07:31:13 XXXXXX imapd[16504]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16505]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16507]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16509]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16506]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16508]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16510]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16511]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16512]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16514]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16513]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16516]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16515]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16518]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:31:25 XXXXXX imapd[16517]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:43 XXXXXX imapd[16584]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16598]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16597]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16595]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16596]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16593]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16594]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16592]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16590]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16591]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16589]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16586]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16588]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16587]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.info.0:Jun 19 07:46:47 XXXXXX imapd[16585]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:13 XXXXXX imapd[16504]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16505]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16507]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16509]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16506]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16508]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16510]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16511]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16512]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16514]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16513]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16516]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16515]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16518]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:31:25 XXXXXX imapd[16517]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:43 XXXXXX imapd[16584]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16598]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16597]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16595]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16596]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16593]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16594]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16592]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16590]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16591]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16589]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16586]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16588]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16587]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
mail.log.0:Jun 19 07:46:47 XXXXXX imapd[16585]: command stream end of file,
while reading line user=??? host=cinequanon.com [209.151.235.233]
